Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402221.roa
File: AS402221.roa (raw, json)
Hash identifier: o8jJXyoSWvI3HPck6TxIjZqsxctwLAAbAE4imvH5pX8=
Subject key identifier: 22:9D:F1:28:59:66:FA:5E:2F:1D:AD:12:BD:BC:5B:22:6A:AA:E4:5E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 45DAF6EBA16F771507A6AB307699A972C57C208D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402221.roa
Signing time: Thu 24 Sep 2026 13:35:33 +0000
ROA not before: Thu 24 Sep 2026 13:30:33 +0000
ROA not after: Thu 23 Sep 2027 13:35:33 +0000
asID: 402221
IP address blocks: 82.41.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:da:f6:eb:a1:6f:77:15:07:a6:ab:30:76:99:a9:72:c5:7c:20:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 24 13:30:33 2026 GMT
Not After : Sep 23 13:35:33 2027 GMT
Subject: CN=229DF1285966FA5E2F1DAD12BDBC5B226AAAE45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:1b:31:ab:0f:a9:b0:8f:cd:c1:b9:0c:f7:
dc:a4:8a:70:cf:14:0c:14:97:60:d4:60:d6:e1:7d:
0e:bd:c8:52:72:46:6d:9d:9b:d1:b4:94:e6:c4:56:
7c:c5:e7:95:2e:9b:77:ec:2c:86:54:74:18:b1:92:
f4:41:3b:f5:4c:a5:a6:1c:29:e2:9c:f7:99:5f:7d:
f9:3a:20:c3:c9:70:fa:96:76:a4:3b:d8:f6:e0:f7:
21:9d:2f:f8:07:9c:93:f3:23:07:d9:43:d1:22:0d:
48:0f:83:0a:2e:67:e8:51:6e:37:b0:78:d4:4d:a0:
85:dc:16:c8:bd:36:eb:34:83:28:5e:f3:f7:3d:cb:
0c:81:8a:06:48:a6:50:b7:e3:b4:c4:9f:5f:70:d9:
e4:75:6c:ed:5a:de:e5:93:3c:3a:8b:94:c2:a5:c9:
5c:51:42:92:ba:3c:b6:34:f8:04:fb:9b:9b:96:13:
ca:f0:59:65:b5:58:1d:05:e3:1e:3f:19:c0:6f:6a:
84:55:1f:9e:e2:8c:b2:b2:85:08:9e:0e:b7:ca:a5:
8e:5b:e0:38:aa:0e:33:df:87:29:12:b5:c2:fa:56:
1d:fa:05:f1:fe:33:66:31:68:53:6e:84:b9:30:c4:
65:a6:22:f1:50:d5:2e:67:08:fa:af:cb:a6:d6:20:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9D:F1:28:59:66:FA:5E:2F:1D:AD:12:BD:BC:5B:22:6A:AA:E4:5E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS402221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.202.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d6:a0:e1:d2:02:f5:27:eb:6a:03:d5:ea:3f:5d:33:f7:42:
aa:23:07:02:f0:e6:7f:8e:93:06:56:97:b5:bf:69:2d:03:3e:
d3:5d:25:03:3f:39:1f:c1:1a:2d:d4:d2:0e:59:ba:f6:0a:e3:
f7:0f:7d:8c:f5:6c:47:bd:40:c0:09:ba:f4:52:63:8d:64:98:
f4:ab:0d:bc:54:e4:96:19:c7:56:25:3a:c1:15:64:9d:1a:d4:
65:f0:70:7a:aa:6d:2f:2b:24:05:03:ed:4b:49:b2:b1:88:a7:
27:e5:8f:4a:96:02:6b:57:e8:b7:49:f4:3b:21:2c:a5:88:2d:
0f:7f:09:fd:92:f2:65:09:77:d9:9d:c5:a0:00:1c:05:89:ff:
5e:e8:51:ca:64:35:10:b5:af:48:95:37:a3:ca:b3:dc:a1:4d:
b0:6e:bd:b7:bf:0d:5b:a9:26:f7:e3:83:6c:3a:4c:0a:97:56:
02:b0:33:e4:e3:34:da:a9:2c:12:81:92:c0:fe:5a:f1:4b:7a:
ba:3d:1d:c7:96:3b:d7:d6:f4:c7:1c:92:b7:4b:fa:38:71:f9:
60:86:12:8f:f9:59:6a:e5:ff:e2:a2:f8:37:4b:75:71:fc:77:
9a:70:8f:4c:8c:0c:e0:e5:9c:b7:32:3d:51:c3:ed:03:57:82:
54:08:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:17:50 2026 by rpki-client